UbuntuUpdates.org

Package "gst-plugins-good1.0"

Name: gst-plugins-good1.0

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • GStreamer plugin for GTK+3
  • GStreamer plugins from the "good" set
  • GStreamer plugin for PulseAudio (transitional package)
  • GStreamer development files for libraries from the "good" set
Latest version: 1.20.3-0ubuntu1.10
Release: jammy (22.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "gst-plugins-good1.0" in Jammy

Repository Area Version
base main 1.20.1-1ubuntu1
base universe 1.20.1-1ubuntu1
security universe 1.20.3-0ubuntu1.10
updates main 1.20.3-0ubuntu1.10
updates universe 1.20.3-0ubuntu1.10

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.20.3-0ubuntu1.5 2026-03-30 14:07:54 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.5) jammy-security; urgency=medium

  * SECURITY UPDATE: multiple rtpqdm2depay code execution issues
    - debian/patches/CVE-2026-3083_5.patch: remove rtpqdm2depay element in
      docs/gst_plugins_cache.json, gst/rtp/gstrtp.c, gst/rtp/meson.build,
      gst/rtp/gstrtpqdmdepay.c, gst/rtp/gstrtpqdmdepay.h.
    - CVE-2026-3083
    - CVE-2026-3085

 -- Marc Deslauriers <email address hidden> Fri, 27 Mar 2026 13:08:07 -0400
Source diff to previous version
CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code
CVE-2026-3085 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar

Version: 1.20.3-0ubuntu1.4 2025-08-26 17:08:04 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.4) jammy-security; urgency=medium

  * SECURITY UPDATE: buffer over-read in isomp4 plugin
    - debian/patches/CVE-2025-47183.patch: use byte reader to parse mvhd
      box in gst/isomp4/qtdemux.c.
    - CVE-2025-47183
  * SECURITY UPDATE: buffer over-read in isomp4 plugin
    - debian/patches/CVE-2025-47219.patch: check if enough bytes are
      available for each stsd entry in gst/isomp4/qtdemux.c.
    - CVE-2025-47219

 -- Marc Deslauriers <email address hidden> Mon, 25 Aug 2025 10:29:08 -0400
Source diff to previous version
CVE-2025-47183 In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leadin
CVE-2025-47219 In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possib

Version: 1.20.3-0ubuntu1.3 2024-12-18 15:06:55 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/202412-sec*.patch: backport upstream security fix
      commits from 1.24.10.
    - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47543,
      CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596,
      CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601,
      CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613,
      CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777,
      CVE-2024-47778, CVE-2024-47834
  * debian/Skip-failing-tests.patch: apply after import-* patches, and
    updated to skip flaky camerabin test causing FTBFS on arm64.

 -- Marc Deslauriers <email address hidden> Mon, 16 Dec 2024 13:36:08 -0500
Source diff to previous version
CVE-2024-47537 GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samp
CVE-2024-47539 GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s3
CVE-2024-47540 GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the
CVE-2024-47543 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container
CVE-2024-47544 GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null deref
CVE-2024-47545 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function wi
CVE-2024-47546 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function
CVE-2024-47596 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data func
CVE-2024-47597 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples with
CVE-2024-47598 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sampl
CVE-2024-47599 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47601 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47602 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47603 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47606 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_the
CVE-2024-47613 GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbis_handle_identific
CVE-2024-47774 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_pa
CVE-2024-47775 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function with
CVE-2024-47776 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavp
CVE-2024-47777 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_c
CVE-2024-47778 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk
CVE-2024-47834 GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the p

Version: 1.20.3-0ubuntu1.1 2023-08-02 18:07:08 UTC
No changelog available yet.


About   -   Send Feedback to @ubuntu_updates